Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3137302e37382e33302e302f32332d3233203d3e20323635323431.roa
File:                     3137302e37382e33302e302f32332d3233203d3e20323635323431.roa (raw, json)
Hash identifier:          uJZUa9ANfWKx98yDh8AS8eqpogODKlirjpt1CmSgnw4=
Subject key identifier:   A5:73:C4:E5:AC:B9:6B:B0:26:83:7C:6F:67:C9:B7:19:07:39:38:F8
Certificate issuer:       /CN=59B08A61D0AC559F86B98780FBFB3EEB7699B2EB
Certificate serial:       2EECCAB1CF84508DB0A1657E7407E06D86AA98B9
Authority key identifier: 59:B0:8A:61:D0:AC:55:9F:86:B9:87:80:FB:FB:3E:EB:76:99:B2:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3137302e37382e33302e302f32332d3233203d3e20323635323431.roa
Signing time:             Tue 17 May 2022 23:48:06 +0000
ROA not before:           Tue 17 May 2022 23:43:06 +0000
ROA not after:            Tue 16 May 2023 23:48:06 +0000
asID:                     265241
IP address blocks:        170.78.30.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ec:ca:b1:cf:84:50:8d:b0:a1:65:7e:74:07:e0:6d:86:aa:98:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B08A61D0AC559F86B98780FBFB3EEB7699B2EB
        Validity
            Not Before: May 17 23:43:06 2022 GMT
            Not After : May 16 23:48:06 2023 GMT
        Subject: CN=A573C4E5ACB96BB026837C6F67C9B719073938F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b7:f5:b8:a2:0c:f7:4c:9a:87:eb:5e:84:18:
                    de:6d:bd:36:0c:ef:9a:16:80:e1:5a:4b:78:82:94:
                    14:7d:47:b2:e9:99:f9:18:b7:37:b7:0d:28:9a:0c:
                    3a:7d:28:4c:ac:c2:1b:56:68:6e:23:81:ab:ee:d4:
                    7f:7b:25:b9:da:07:cb:f2:f1:d2:74:cd:fd:06:cb:
                    14:1e:73:c3:a0:00:fe:e7:f7:1e:b9:8c:b9:7f:bc:
                    d9:5e:54:da:c8:77:1e:d8:07:0d:fe:88:1f:8e:8e:
                    ef:d4:87:5d:76:88:5c:b9:f9:07:37:71:f2:ef:64:
                    f4:d4:b5:2c:37:7f:7d:e9:13:15:bb:f5:1d:d9:c9:
                    42:74:47:ab:7b:8d:f6:b0:2a:ad:6f:b4:75:02:79:
                    f4:54:24:ad:91:47:a1:57:f4:c6:3d:bb:7a:ca:87:
                    db:59:2a:7e:91:23:93:0b:1b:6f:7f:32:f1:af:f4:
                    cf:16:97:b3:76:85:93:88:f4:7d:1e:c5:d5:01:ce:
                    19:03:30:ce:c7:3f:e3:31:b2:ee:c6:15:9b:ae:f4:
                    21:ca:b7:c0:c9:92:54:14:1f:e6:5e:76:71:aa:4a:
                    d0:77:ea:f5:11:2e:28:55:f0:68:e4:d6:82:88:53:
                    38:81:fd:80:a6:8a:88:bd:44:2f:b3:d5:6d:7e:d3:
                    ec:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:73:C4:E5:AC:B9:6B:B0:26:83:7C:6F:67:C9:B7:19:07:39:38:F8
            X509v3 Authority Key Identifier:
                keyid:59:B0:8A:61:D0:AC:55:9F:86:B9:87:80:FB:FB:3E:EB:76:99:B2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3137302e37382e33302e302f32332d3233203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:fd:70:71:42:19:43:ab:b1:96:36:20:92:90:5a:e9:e8:00:
         75:0e:ef:bc:7e:a1:f8:7a:7f:ce:a6:e6:91:de:9d:d5:5f:fe:
         08:94:8c:38:df:1c:05:bc:57:2b:25:1c:3e:61:5f:73:95:8b:
         75:d5:89:3b:67:b0:4f:42:ac:13:b3:c0:03:83:e8:a7:92:bd:
         46:8f:ea:8d:d8:29:bf:02:ac:e1:d0:a4:19:fe:35:20:1d:e9:
         4c:dc:b2:12:2e:41:e2:ef:2b:0c:cf:6a:eb:5e:71:a1:74:04:
         c0:c6:54:dc:ad:ec:10:d2:9c:fd:06:22:c3:bd:a8:d9:09:08:
         fd:a2:6e:cb:2d:24:93:c3:02:43:3d:d8:98:ea:41:0b:bd:e0:
         14:b8:21:28:3c:52:73:9d:ac:15:de:a3:48:bd:c5:e2:64:bd:
         a9:31:49:56:f9:2b:78:3f:a6:60:74:71:08:1f:32:c5:5d:f0:
         b2:7d:f7:28:9d:2f:26:6e:4d:7c:83:87:60:32:a7:d9:e8:7b:
         f9:2f:9a:b8:56:3c:95:ae:91:c0:20:16:3d:51:e8:c5:63:54:
         da:ba:98:c4:c4:cd:ba:fb:67:3f:67:9d:ef:32:39:35:3e:18:
         e3:0c:d3:df:c2:8e:f8:45:73:b8:47:06:8c:95:17:18:61:d1:
         e0:bb:7a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org